Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/85660311-3e9d-3819-9743-e8455877eb55.roa
File:                     85660311-3e9d-3819-9743-e8455877eb55.roa (raw, json)
Hash identifier:          DVMvhPpLtsnikq5VQftGIcz9rpb/SKijCqiturZoykw=
Subject key identifier:   A4:9D:AC:52:BB:19:1B:15:FC:C7:CD:04:22:FA:F0:A2:C4:E7:23:E9
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584A1B5FF8122A29AC44AB12FE80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/85660311-3e9d-3819-9743-e8455877eb55.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     46261
IP address blocks:        104.218.195.0/24 maxlen: 24
                          104.251.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:f8:12:2a:29:ac:44:ab:12:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=613f8801-5381-4699-ad8d-3f0493f20fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:8c:e6:0e:32:16:81:02:14:48:57:10:ce:
                    62:bf:75:2b:f2:a1:05:31:71:e1:29:4e:1f:d1:19:
                    2e:52:b1:59:b9:07:99:71:63:d4:c8:3b:fc:e9:d6:
                    8c:12:b0:63:ab:58:d4:9e:8d:e7:ee:9b:28:1b:9a:
                    67:55:77:88:29:28:0a:22:7b:12:08:c5:8e:4f:da:
                    45:b1:5f:6a:9a:1c:7b:12:60:2a:ca:ef:3f:db:67:
                    c7:71:7c:2f:69:28:10:81:3d:96:c4:b0:28:42:90:
                    ff:8c:b0:89:2a:03:da:f5:ad:69:fe:5d:8a:11:a1:
                    5f:87:be:2c:93:77:e1:66:d0:1f:db:ac:c1:df:df:
                    05:43:5c:9c:40:d9:7d:1f:65:32:89:c4:fe:2e:7e:
                    87:8e:3f:f2:4f:5d:95:9c:4f:5f:04:7e:32:ac:aa:
                    2f:7d:22:59:b1:87:f8:8b:d4:2e:a1:71:67:98:35:
                    ab:a2:4a:54:2a:19:a6:8e:61:eb:78:32:9a:3e:10:
                    f5:0b:a6:ab:1d:56:79:b0:45:d1:3b:c5:da:6e:a2:
                    ff:1d:dd:27:c6:a4:e7:a1:b9:31:56:bd:31:40:f6:
                    5b:94:93:2a:9b:2a:ec:59:3a:6d:0e:81:5a:e7:38:
                    9a:ac:90:67:44:32:50:f8:60:b3:b5:32:48:1b:80:
                    09:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9D:AC:52:BB:19:1B:15:FC:C7:CD:04:22:FA:F0:A2:C4:E7:23:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/85660311-3e9d-3819-9743-e8455877eb55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.195.0/24
                  104.251.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:5e:d9:7a:f0:74:1d:d2:9e:41:b1:19:25:01:17:e1:fa:c2:
         11:3f:84:38:29:00:cc:18:c0:f2:1a:17:91:4c:a4:1a:70:19:
         c7:8c:af:29:73:3f:fc:a7:c0:c8:f8:33:3f:6a:af:f4:30:6f:
         5b:e1:98:dd:d4:86:ce:84:7f:bf:99:01:04:7c:66:c6:60:7d:
         4d:f5:13:a0:5e:e4:cc:cb:17:c4:5d:00:9f:e4:c9:0f:d9:fc:
         cd:b9:ee:a5:4b:fa:41:97:38:61:6b:26:e1:13:c7:81:fe:ed:
         29:d8:e7:0c:0f:c4:01:11:4b:f1:bc:13:b8:6c:ae:36:5b:1d:
         8e:13:fe:1e:13:4e:a2:43:5c:ad:1d:4a:d4:33:a4:a8:74:a0:
         6e:96:d0:a9:79:79:f3:84:69:23:a5:24:43:c2:ec:19:77:c3:
         d3:9f:1a:6e:8c:95:3d:18:22:86:2c:e4:49:a0:b3:3b:87:38:
         a2:2f:96:d3:bc:3c:f7:cf:9d:49:fe:3c:ef:51:31:d6:a2:38:
         a4:17:cd:ff:c7:e1:c6:0c:72:bb:bf:6e:3d:b9:02:7e:c3:1a:
         ee:20:55:86:3f:2a:fd:42:c8:20:d7:7d:ad:ac:a1:6f:53:5f:
         a8:59:3f:45:24:16:58:aa:2e:8f:1d:f4:82:64:77:b1:16:6c:
         99:b4:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:50:05 2025 by rpki-client